1
0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-01-19 05:49:09 +02:00
FFmpeg/libavcodec
James Zern 002bbc3687 vp9/update_prob: prevent out of bounds table read
the max value of the lookup in expanded form is:
(((1 << 7) - 1) << 1) - 65 + 1 + 64 = 254

add one entry of padding to inv_map_table[] to prevent out of bounds
access with non-conforming / fuzzed bitstreams

Signed-off-by: James Zern <jzern@google.com>
Reviewed-by: "Ronald S. Bultje" <rsbultje@gmail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit e91f860ea74e11e9178500fe8794c47f57dbf48c)

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
2015-07-20 04:43:41 +02:00
..
2015-03-06 14:37:44 +01:00
2015-03-13 13:04:31 +01:00
2015-03-03 13:57:42 +01:00
2015-03-03 13:57:42 +01:00
2015-07-20 04:43:39 +02:00
2015-02-21 20:38:13 +01:00
2015-07-20 04:43:39 +02:00
2015-02-06 19:07:29 +01:00
2015-02-05 09:48:54 +00:00
2015-05-15 20:40:26 +02:00
2015-02-17 11:27:42 -05:00
2015-03-28 20:01:22 +01:00
2015-02-08 00:12:46 +01:00
2015-02-14 19:45:23 +00:00
2015-03-14 14:26:28 +01:00
2015-06-19 10:37:30 +02:00
2015-02-21 15:50:19 +01:00
2015-02-10 14:20:32 +00:00
2015-02-01 19:13:38 +01:00
2015-03-02 19:32:23 +01:00
2015-03-28 11:59:04 +01:00
2015-02-27 09:30:13 +00:00
2015-02-18 10:21:56 -05:00
2015-01-22 01:49:04 +01:00
2015-01-22 01:49:04 +01:00
2015-02-24 03:15:42 +01:00
2015-02-06 21:02:08 +01:00
2015-02-15 17:28:02 +01:00
2015-02-14 12:48:41 +00:00
2015-05-15 10:04:51 +02:00
2015-02-04 09:45:41 +00:00